Security issue means Flashcard doesn't work on my web host

  • Resolved Daniel

    (@rawreef)


    10 years, 5 months ago

    I’ve just moved to a new web host: Synthesis. (If anyone needs great hosting, check them out! Very happy so far.)

    The problem is, this Flashcard plugin isn’t working anymore. I contacted support and got this message back:

    “You will want to verify with the plugin author that this Flashcard plugin does not require the exec() / exec.php or url_fopen functions, as both of those have been disabled on Synthesis hosting for security reasons. We do support CURL as an alternative to url_fopen.”

    Because Synthesis only provide WordPress hosting, their expertise and security rules/tips should be taken really seriously.

    So please, Liang, if you’re using those banned functions in the plugin, could you switch them over to CURL? I’d be very happy to make another donation if you can do this.

    Hope to hear from you. 🙂

    http://wordpress.org/plugins/flashcard/

Viewing 5 replies - 1 through 5 (of 5 total)
  • Thread Starter Daniel

    (@rawreef)

    10 years, 5 months ago

    …Just to explain a bit more clearly:

    The Flashcard plugin doesn’t seem to be able to access the csv files, perhaps because it’s using the exec() / exec.php or url_fopen functions (mentioned above) to do so. My web host doesn’t allow these functions, as they’re a security risk.

    Hope that makes sense? I can explain more if needed.

    Plugin Author Liang Shao

    (@liangshao)

    10 years, 5 months ago

    Hi Daniel:
    I have replaced the fopen() function with the curl() function and released version 0.9, please try again.
    Thanks,
    Liang

    Thread Starter Daniel

    (@rawreef)

    10 years, 5 months ago

    Thanks so much, Liang. I’ll try it out and post again once I’ve checked if it works.

    Thread Starter Daniel

    (@rawreef)

    10 years, 5 months ago

    When the flashcard plugin wasn’t working, I switched back to my old hosting company. For now, I’ve decided to remain with my old hosting company, so I can’t actually test out the updated plugin on Synthesis’s hosting.

    Is there anyone else on Synthesis hosting who could test it out?

    Thread Starter Daniel

    (@rawreef)

    10 years, 4 months ago

    Just to update:

    Version 0.9 is working perfectly on Synthesis hosting with the new curl() function.

    Thanks, Liang! 🙂

Viewing 5 replies - 1 through 5 (of 5 total)
  • The topic ‘Security issue means Flashcard doesn't work on my web host’ is closed to new replies.